88d40272af0882ef14cc259ce85ce218c25b8233521dd9058237342a79b79108 | Triage

Analysis

max time kernel
119s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
18/03/2024, 12:48

Sharing

Report Analysis Logs

General

Target

d38dcd2b8097ffe4f26fc50ab0a855a1.exe
Size

5.1MB
MD5

d38dcd2b8097ffe4f26fc50ab0a855a1
SHA1

19899b16a7f5c0cf9c2da3b5570a305f4df99d81
SHA256

88d40272af0882ef14cc259ce85ce218c25b8233521dd9058237342a79b79108
SHA512

96ee3725c617b5378ac1e53844a93f4096e2ce7e225973e2eae69204631a0dfc8f9d995052a6947562ceefbe3e366e2bbdfe0412d81fa3ab55a47002bc587b29
SSDEEP

98304:sfCxqQOuG8kigO3S11qronI0Iy5fKP7grvYLS3:+sGxda0j9

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/1400-1-0x0000000000400000-0x0000000000D9E000-memory.dmp	upx

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
1400	d38dcd2b8097ffe4f26fc50ab0a855a1.exe

C:\Users\Admin\AppData\Local\Temp\d38dcd2b8097ffe4f26fc50ab0a855a1.exe
"C:\Users\Admin\AppData\Local\Temp\d38dcd2b8097ffe4f26fc50ab0a855a1.exe"
1⤵
- Suspicious use of UnmapMainImage
PID:1400

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1400-1-0x0000000000400000-0x0000000000D9E000-memory.dmp

Filesize
9.6MB

Download
memory/1400-0-0x0000000000400000-0x0000000000605000-memory.dmp

Filesize
2.0MB

Download
memory/1400-3-0x00000000021A0000-0x00000000023FA000-memory.dmp

Filesize
2.4MB

Download
memory/1400-6-0x0000000000400000-0x0000000000D9E000-memory.dmp

Filesize
9.6MB

Download